CNNVD-202508-1173 Information

CNNVD ID

CNNVD-202508-1173

CVE-2025-49559

  • CNNVD Published: 2025-08-12

Description (Chinese)

Adobe Commerce是美国奥多比(Adobe)公司的一种面向商家和品牌的全球领先的数字商务解决方案。 Adobe Commerce存在路径遍历漏洞,该漏洞源于容易受到路径遍历攻击。以下版本受到影响:2.4.9-alpha1版本、2.4.8-p1版本、2.4.7-p6版本、2.4.6-p11版本、2.4.5-p13版本、2.4.4-p14版本及之前版本。

Description (English)

Adobe Commerce is the leading global digital business solution for both business and brands in Adobe, United States. Adobe Commerce has a loophole in its path, which stems from its vulnerability to attacks. The following versions were affected: 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier.

Hazard Level

High

Vulnerability Type

路径遍历

Affected Vendor

奥多比

Published

2025-08-12

Last Modified

2026-02-24

References

https://helpx.adobe.com/security/products/magento/apsb25-71.html

Patch

https://helpx.adobe.com/security/products/magento/apsb25-71.html

Share on: